CVE-2026-57832CWE-89sql-injection

CVE-2026-57832

published July 15, 2026

CVSS

8.7

EPSS

Percentile

33.2

In the wild

Unconfirmed

What it is

Joomla Extension - joomdonation.com - Unauthenticated blind SQL injection in EDocman < 3.9 - The Joomla extension EDocman is vulnerable to an unauthenticated SQL injection.

The record

Technical detail

CVSS: 8.7 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00401 · 33.2th percentile
Weakness: CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published: 2026-07-15T13:16Z

References (2)

https://joomdonation.com/joomla-extensions/edocman-joomla-download-manager.html · [email protected]https://mysites.guru/blog/edocman-sql-injection-disclosure/ · 134c704f-9b21-4f2e-91b3-4a467353bcc0

EPSS history

Timeline

15 JUL 08:09Z
Joomla Extension - joomdonation.com - Unauthenticated blind SQL injection in EDocman < 3.9
cvelistv5